Privacy Policy
Last updated: 12 July 2026
1. Introduction
PicheleMarkt is committed to protecting the privacy of its users. This Privacy Policy explains how we collect, use and protect your personal data in accordance with the General Data Protection Regulation (GDPR).
2. Data Collected
We collect the following data:
- Account data: email, name, password (hashed)
- Order data: delivery address, purchase history
- Technical data: IP address, browser type (server logs)
- Essential cookies: session token, cart identifier
3. Purposes of Processing
Your data is used to:
- create and manage your customer account
- process and deliver your orders
- communicate with you (order confirmation, customer service)
- improve our services (anonymous statistics)
4. Legal Basis
The processing of your data is based on:
- performance of the contract (Art. 6(1)(b) GDPR)
- your consent (Art. 6(1)(a) GDPR)
- our legitimate interest (Art. 6(1)(f) GDPR)
5. Recipients
Your data is accessible only to PicheleMarkt. It may be shared with:
- our payment providers (Stripe, PayPal)
- our logistics partners for shipping orders
We NEVER sell your data to third parties.
6. Retention Period
Your data is retained for the duration of your account plus 3 years after your last order (legal retention obligation). Server logs are kept for 12 months. Session cookies expire when the browser is closed.
7. Your Rights
Under the GDPR, you have the following rights:
- Right of access: view your data
- Right to rectification
- Right to erasure
- Right to object
- Right to data portability
To exercise these rights: contact@pichelemarkt.com
8. Security
We implement appropriate technical and organizational measures: HTTPS encryption, hashed passwords (bcrypt), restricted server access, regular backups.
9. Cookies
Our website uses exclusively technically necessary cookies:
- Session cookie (authentication)
- Language preference cookie
No advertising or tracking cookies are set.
10. Data Protection Contact
For data protection questions: contact@pichelemarkt.com